Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dd18d53-59c8-427f-9c2f-1f62eab97cb2/f2b28ae8-59d5-3fcb-9ef9-d18344c43a3e.roa
File:                     f2b28ae8-59d5-3fcb-9ef9-d18344c43a3e.roa (raw, json)
Hash identifier:          MsIbTHkZ/2DxbOt6yNx1PSDMCfTPw77MxtbgdqpEp2o=
Subject key identifier:   17:5F:46:9A:45:23:CB:29:A6:8C:55:0F:C9:A2:36:ED:8E:A9:13:DD
Certificate issuer:       /CN=2dd18d53-59c8-427f-9c2f-1f62eab97cb2
Certificate serial:       010D0C9F4328584CED279229441B7C90C80D9180
Authority key identifier: 09:BA:D3:03:4B:6A:2C:C1:74:41:89:81:CB:15:5B:65:64:42:FF:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dd18d53-59c8-427f-9c2f-1f62eab97cb2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dd18d53-59c8-427f-9c2f-1f62eab97cb2/f2b28ae8-59d5-3fcb-9ef9-d18344c43a3e.roa
Signing time:             Fri 20 Feb 2026 14:00:41 +0000
ROA not before:           Fri 20 Feb 2026 14:00:41 +0000
ROA not after:            Thu 21 May 2026 13:00:41 +0000
asID:                     399661
IP address blocks:        45.41.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dd18d53-59c8-427f-9c2f-1f62eab97cb2/2dd18d53-59c8-427f-9c2f-1f62eab97cb2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dd18d53-59c8-427f-9c2f-1f62eab97cb2/2dd18d53-59c8-427f-9c2f-1f62eab97cb2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dd18d53-59c8-427f-9c2f-1f62eab97cb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ed:27:92:29:44:1b:7c:90:c8:0d:91:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dd18d53-59c8-427f-9c2f-1f62eab97cb2
        Validity
            Not Before: Feb 20 14:00:41 2026 GMT
            Not After : May 21 13:00:41 2026 GMT
        Subject: CN=e389408f-52bf-4082-8590-71fd7b15190e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:09:00:78:c4:ee:ac:11:42:8b:64:98:47:81:
                    a1:8d:25:10:f7:04:ec:e8:82:77:c7:d0:8d:a9:f7:
                    82:c8:75:3a:68:a2:24:bd:bf:f3:d0:0d:8f:f1:f3:
                    a1:af:18:11:11:8a:e5:19:8f:6b:70:9f:ab:94:02:
                    a8:7f:3b:dd:36:67:65:f5:aa:34:9f:b4:91:1c:dd:
                    53:99:cc:20:ad:d1:bd:b9:f5:a3:89:d2:d2:79:a6:
                    fa:3c:06:05:ce:d9:87:7d:16:f2:2f:e2:99:57:bb:
                    0d:26:44:c0:1b:9e:97:50:29:7f:3a:2f:c8:7d:77:
                    82:bf:51:15:f8:4a:45:c7:78:8b:68:77:85:85:2a:
                    a5:4c:b6:e2:1e:be:42:16:de:fb:dd:2e:72:ee:9a:
                    61:7d:03:dc:65:b0:7c:76:cd:db:d8:85:86:f9:8b:
                    be:33:2d:e5:88:65:b6:57:f6:7a:74:ec:12:04:c8:
                    71:f8:19:d2:56:a9:79:38:78:95:80:5c:2a:e1:80:
                    cc:9d:db:19:c6:1c:08:25:78:b3:39:69:e6:62:e9:
                    d7:d9:a2:fd:2b:8d:3f:95:29:cf:c9:b7:ce:a1:aa:
                    31:0d:3d:a0:bd:b4:ce:aa:27:03:2b:d4:75:69:7c:
                    1b:e5:41:1f:76:12:46:b4:a4:f8:25:04:53:49:24:
                    f7:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:5F:46:9A:45:23:CB:29:A6:8C:55:0F:C9:A2:36:ED:8E:A9:13:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dd18d53-59c8-427f-9c2f-1f62eab97cb2/f2b28ae8-59d5-3fcb-9ef9-d18344c43a3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dd18d53-59c8-427f-9c2f-1f62eab97cb2/2dd18d53-59c8-427f-9c2f-1f62eab97cb2.crl

            X509v3 Authority Key Identifier:
                keyid:09:BA:D3:03:4B:6A:2C:C1:74:41:89:81:CB:15:5B:65:64:42:FF:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dd18d53-59c8-427f-9c2f-1f62eab97cb2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.41.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:fb:29:7b:66:a6:7f:a1:ef:9a:e3:0c:51:73:2c:6f:12:94:
         ec:6a:2b:4f:11:ca:74:f9:5d:9f:50:53:4a:dc:48:6c:e1:48:
         00:d4:c9:7b:ca:47:e8:b4:f4:af:07:72:9d:70:39:50:39:64:
         1a:d9:40:93:ac:71:35:5a:9f:f4:ee:de:0c:bb:25:7c:e7:6e:
         f1:8d:d2:25:36:6a:95:2f:61:63:9c:0f:11:9d:a0:05:e0:0b:
         15:ec:0e:30:68:db:19:41:c5:a7:57:d9:c3:34:91:a9:32:31:
         8e:7c:08:52:b0:5a:61:97:45:a0:59:9f:a9:4b:20:b0:da:38:
         fd:4b:2f:fa:8b:03:c7:2f:fb:0f:8f:60:a6:2d:26:aa:00:eb:
         da:18:9f:6e:bc:2e:07:12:76:42:e7:2c:68:36:13:76:c6:f8:
         e2:5e:c8:54:b8:e8:44:c6:cc:46:39:dc:2b:f6:6a:9c:dc:b0:
         1e:b6:c1:3b:3e:c0:ec:e5:59:86:97:fc:64:d8:1b:47:13:9b:
         2f:aa:be:bd:a0:52:4e:cc:34:62:01:ae:ef:0c:3d:5f:44:4e:
         22:e9:b5:7d:3e:fc:34:d4:e0:96:d3:e2:64:6e:c9:37:e5:25:
         02:40:3e:e1:1d:b2:03:68:9a:c8:26:c1:b4:81:52:4b:65:d9:
         83:70:c4:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:15:06 2026 by rpki-client